CVE-2007-2834
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 12%
probabilidade de exploração
12%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
Produtos afetados
n/a · n/aReferências
http://bugs.gentoo.org/show_bug.cgi?id=192818http://fedoranews.org/updates/FEDORA-2007-237.shtmlhttp://fedoranews.org/updates/FEDORA-2007-700.shtmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=593http://lists.opensuse.org/opensuse-security-announce/2007-09/msg00002.htmlhttp://secunia.com/advisories/26816http://secunia.com/advisories/26817http://secunia.com/advisories/26839http://secunia.com/advisories/26844http://secunia.com/advisories/26855http://secunia.com/advisories/26861http://secunia.com/advisories/26891